Privacy Policy

Last Updated: April 9, 2026  ·  Effective Date: April 9, 2026

The short version: WA Recall stores your WhatsApp messages on a secure server you control. We do not sell your data, share it with advertisers, or read your messages. Your data belongs to you.

1. Introduction

WA Recall ("we," "us," or "our") is a personal WhatsApp message archive application developed by Pinchus Grosz. This Privacy Policy explains how we collect, use, store, and protect information when you use the WA Recall iOS application and associated server service (collectively, the "Service").

By using WA Recall, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 WhatsApp Message Data

WA Recall captures and stores the following WhatsApp data on your private server account:

  • Message text content (including deleted and edited messages)
  • Message metadata: timestamps, sender identifiers, read receipts, delivery status
  • Media files: photos, videos, voice notes, documents, and stickers
  • Contact names and profile pictures (as displayed in WhatsApp)
  • Group chat names, participant lists, and group metadata
  • WhatsApp Status updates (text, photos, videos) from your contacts
  • Reaction data and poll responses

2.2 Account Information

  • Email address (used for account creation and authentication)
  • Hashed password (we never store plaintext passwords)
  • WhatsApp phone number (used to link your WhatsApp account)
  • License key (used to verify your subscription)

2.3 Device and Usage Data

  • iOS device type and operating system version (for compatibility purposes)
  • App version number
  • Session authentication tokens (stored securely on your device)
  • iCloud backup metadata (backup timestamps, file sizes)

2.4 Data We Do NOT Collect

  • We do not collect precise geolocation data
  • We do not collect financial or payment card information (payments are processed by Apple)
  • We do not use advertising identifiers (IDFA)
  • We do not collect data from other apps on your device

3. How We Use Your Information

We use the information we collect solely to provide and improve the Service:

  • Message archiving: To capture, store, and display your WhatsApp messages in the app
  • Search and retrieval: To enable full-text search across your message history
  • Authentication: To verify your identity and maintain secure sessions
  • Subscription management: To verify active subscription status and enforce access controls
  • iCloud backup: To back up your archived messages to your private iCloud account
  • Service improvement: To diagnose technical issues and improve app performance
  • Communications: To send service-related emails (account creation, password reset, critical updates)

We do not use your message content for advertising, machine learning model training, or any purpose other than providing the Service to you.

4. Data Storage and Security

4.1 Server Storage

Your WhatsApp data is stored on a dedicated server associated with your account. The server uses industry-standard security measures including encrypted connections (TLS/HTTPS), hashed passwords (bcrypt), and JWT-based authentication with expiring tokens.

4.2 iCloud Backup

When you enable iCloud Backup, your archived messages are backed up to your private iCloud account using Apple's CloudKit framework. This data is stored in your personal iCloud storage and is governed by Apple's iCloud Terms of Service and Privacy Policy. We cannot access your iCloud data.

4.3 Data Retention

  • Active accounts: Your data is retained for as long as your account is active
  • Cancelled subscriptions: Data is retained for 30 days after subscription cancellation, then permanently deleted upon request
  • Account deletion: All data is permanently deleted within 30 days of account deletion request
  • Authentication tokens: Session tokens expire after 30 days of inactivity

4.4 Data Location

Your data is stored on servers located in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States.

5. Third-Party Services

WA Recall uses the following third-party services:

  • Apple App Store / StoreKit: For processing in-app subscription payments. Apple's privacy policy governs payment data.
  • Apple CloudKit / iCloud: For optional encrypted backup of your message archive. Governed by Apple's Privacy Policy.
  • Baileys (WhatsApp Web API library): An open-source library used to connect to WhatsApp. No data is shared with the library's developers.
  • PostgreSQL: Database software used to store your messages on your private server. No data is shared with PostgreSQL developers.

We do not sell, trade, or rent your personal information to third parties. We do not share your data with advertisers, data brokers, or analytics companies.

6. Subscriptions and Payments

WA Recall offers auto-renewing subscription plans available through the Apple App Store:

  • Weekly Plan: Billed weekly, auto-renews unless cancelled
  • Annual Plan: Billed annually, auto-renews unless cancelled

Payment is charged to your Apple ID account at confirmation of purchase. Subscriptions automatically renew unless auto-renewal is turned off at least 24 hours before the end of the current period. Your account will be charged for renewal within 24 hours prior to the end of the current period.

You can manage and cancel your subscription at any time in your iPhone Settings under your Apple ID → Subscriptions. Cancellation takes effect at the end of the current billing period. No refunds are provided for unused portions of a subscription period.

Prices are subject to change. Any price changes will be communicated in advance through the App Store.

7. Your Rights and Choices

You have the following rights regarding your personal data:

  • Access: You can access all your stored messages through the WA Recall app at any time
  • Export: You can export your message data through the app's export feature
  • Deletion: You can request deletion of your account and all associated data by contacting us at [email protected]
  • Correction: Contact us to correct inaccurate account information
  • Opt-out: You can disconnect your WhatsApp account at any time through the app settings, which stops all future data collection

California Residents (CCPA): California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

European Residents (GDPR): If you are located in the European Economic Area, you have rights under GDPR including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at [email protected] to exercise these rights.

8. Children's Privacy

WA Recall is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

9. WhatsApp Terms Compliance

WA Recall connects to WhatsApp using the WhatsApp Web protocol. By using WA Recall, you acknowledge that you are using this service for personal archiving purposes only. You are responsible for ensuring your use of WA Recall complies with WhatsApp's Terms of Service. WA Recall is not affiliated with, endorsed by, or sponsored by WhatsApp Inc. or Meta Platforms, Inc.

10. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you via email within 72 hours of becoming aware of the breach, as required by applicable law. The notification will describe the nature of the breach, the data affected, and the steps we are taking to address it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will also send an email notification to your registered email address. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will respond to all privacy-related inquiries within 30 days.